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Claims 

1 . A method of controlling a personal firewall in a client computer, 
said method comprising 

providing said personal firewall with at least one set of security rules 
to be used when said client computer is connected to a home network of said 
client computer, and at least one set of security rules to be used when said 
client computer is connected to foreign networks, 

monitoring the current location of said client computer based on an 
Internet Protocol (IP) address currently used by said client computer, and 

automatically selecting one of said sets of security rules by said 
personal firewall according to said current location of said client computer. 

2. A method according to claim 1, wherein 

said step of providing comprises providing said client computer with 
said set of security rules in form of at least two rule bases, 

said step of selecting comprises enabling one of said rule bases at 
a time according to the current location of said client computer. 

3. A method according to claim 1 , wherein 

said step of providing comprises providing said client computer with 
said set of security rules in form of one rule base, and 

said step of selecting comprises enabling and disabling rules in said 
one rule base in different combinations according to the current location of 
said client computer. 

4. A method according to claim 1 , wherein said step of monitoring 

comprises 

storing in said client computer an IP address space of said home 

network, 

comparing the current IP address of said client computer with said 
IP address space, and 

if the current IP address of said client computer matches said IP 
address space, determining said personal firewall to be located in said home 
network. 
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5. A method according to any one of claims 1, 2 or 3, wherein said 
step of monitoring comprises 

storing in said client computer a list of IP addresses of said home 

network, 

comparing the current IP address of said client computer with said 
list of IP addresses, and 

if the current IP address of said client computer matches one of 
said addresses on said list, determining said client computer to be located in 
said home network. 

6. A method according to any one of claims 1 , 2 or 3, comprising 
verifying the current location determined on the basis of the current 

IP address of said client computer by carrying out a location verification pro- 
cedure with a predetermined network element. 

7. A method according to claim 6, wherein said step of verifying 

comprises 

checking availability of said predetermined network element related 
to the current IP address, said predetermined network element responding 
only if said client computer is located in the network in which it is assumed to 
be on the basis of the current IP address, 

verifying the current location determined based on said current IP 
address, if said predetermined network element responses with a specific 
identity data. 

8. A method according to claim 7, wherein said specific identity data 
is a Media Access Control (MAC) address of said predetermined network ele- 
ment. 

9. A method of managing a personal firewall in a client computer, 

comprising 

storing in said personal firewall at least one set of security rules to 
be used when said client computer is connected to a home network of said cli- 
ent computer, and at least one set of security rules to be used when said client 
computer is connected to foreign networks, 
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storing updated sets of security rules, if any, in a centralized unit in 
said home network of said client computer, 

configuring said personal firewall to periodically query the availa- 
bility of said updated sets of security rules from said centralized rule base 
server when being located in said home network, or when having a remote ac- 
cess to said home network while being located in a foreign network, and 

loading said updated sets of security rules from said centralized rule 
base server to said personal firewall in response to said query, if such updated 
sets of security rules are available. 

10. A method according to claim 9, comprising 

monitoring the current location of said client computer based on an 
Internet Protocol (IP) address currently used by said client computer, and 

automatically activating said periodical query, when the current lo- 
cation of said client computer is in said home network. 

1 1 . A method according to claim 9, comprising 

monitoring the current location of said client computer based on an 
Internet Protocol (IP) address currently used by said client computer, 

sending log files to a centralized log server from said personal 
firewall, when the current location of said client computer is in said home net- 
work, said log files containing information on communication transactions in 
said client computer, 

collecting log files locally at said personal firewall, when the current 
location of said client computer is not in said home network, and 

transferring said locally collected log files from said personal firewall 
to said centralized log server, when said client computer is connected to said 
home network. 

12. A computer terminal, comprising 

a personal firewall provided with at least one set of security rules to 
be used when said computer terminal is connected to a home network of said 
computer terminal, and at least one set of security rules to be used when said 
computer terminal is connected to foreign networks, 
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said personal firewall having a mechanism monitoring the current 
location of said computer terminal based on an Internet Protocol (IP) address 
currently used by said computer terminal, and 

said personal firewall having a mechanism automatically selecting 
one of said sets of security rules by said personal firewall according to said 
current location of said computer terminal. 

13. A computer terminal according to claim 12, further comprising 

a mechanism verifying the current location determined on the basis 
of the current IP address of said computer terminal by carrying out a location 
verification procedure with a predetermined network element. 

14. A computer-readable medium, containing a computer software 
which, when executed in a computer device, causes the computer device to 
provide a personal firewall routine comprising 

storing at least one set of security rules to be used when said com- 
puter device is connected to a home network of said computer device, and at 
least one set of security rules to be used when said computer device is con- 
nected to foreign networks, 

monitoring the current location of said computer device based on an 
Internet Protocol (IP) address currently used by said computer device, and 

automatically selecting one of said sets of security rules by said 
personal firewall according to said current location of said computer device. 

15. A computer-readable medium according to claim 14, said per- 
sonal firewall routine further comprising 

verifying the current location determined on the basis of the current 
IP address of said client computer by carrying out a location verification pro- 
cedure with a predetermined network element 

16. A computer device, comprising a personal firewall routine con- 
figured to store security rules for a home network of said computer device, and 
for foreign networks, 

periodically query the availability of updated security rules from a 
centralized rule base server in said home network of said computer device 
when said computer device is located in said home network, and 
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download said updated security rules from said centralized rule 
base server, if such updated security rules are available in said centralized 
rule base server. 

17. A computer device according to claim 16, said personal firewall 
routine being further configured to 

activate said periodical query also when said computer device has a 
remote access to said home network while being located in a foreign network. 

1 8. A computer device, comprising a personal firewall routine con- 
figured to 

send log files to a centralized log server, when a current location of 
said computer device is in a home network of said computer device, said log 
files containing information on communication transactions in said computer 
device, 

collect log files locally in said computer device, when the current lo- 
cation of said client device is not in said home network, 

transfer said locally collected log files to said centralized log server, 
when said computer device is reconnected to said home network. 

19. A computer-readable medium, containing computer software 
which, when executed in a computer device, causes the computer device to 
provide a personal firewall routine comprising 

storing security rules for a home network of said computer device, 
and for foreign networks, 

periodically querying the availability of updated security rules from a 
centralized rule base server in said home network of said computer device 
when said computer device is located in said home network, and 

downloading said updated security rules from said centralized rule 
base server, if such updated security rules are available in said centralized 
rule base server. 
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20. A computer-readable medium, containing computer software 
which, when executed in a computer device, causes the computer device to 
provide a personal firewall routine comprising 

sending log files to a centralized log server, when a current location 
of said computer device is in a home network of said computer device, said 
log files containing information on communication transactions in said com- 
puter device, 

collecting log files locally in said computer device, when the current 
location of said client device is not in said home network, 

transferring said locally collected log files to said centralized log 
server, when said computer device is reconnected to said home network. 
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